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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1. (previously presented) A method of operating a trusted 
computing system comprising a plurality of computing devices on 
a network, the method comprising: 

an assessor computing device receiving via the network a 
report from, and pertaining to the trustworthiness of, a first 
computing device; and 

the assessor computing device updating via the network the 
trust policy of a second computing device in accordance with the 
report . 

2. (previously presented) A method according to claim 1, 
wherein the assessor computing device updates via the network 
the trust policies of multiple computing devices in accordance 
with the report . 

3. (previously presented) A method according to claim 1, 
wherein the assessor computing device updates via the network 
policies by assessing the trustworthiness of the first computing 
device on the basis of information about the first computing 
device in the report . 
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4. (previously presented) A method according to claim 1, 
wherein the assessor computing device updates via the network 
policies on the basis of an assessment of the trustworthiness of 
the first computing device contained in the report. 

5. (previously presented) A method according to claim 1, 
wherein the assessor computing device requests via the network 
the first computing device to make the report. 

6. (original) A method according to claim 1, wherein the 
first computing device is caused to report by being started-up 
or reset, or by an undesirable event occurring. 

7. (original) A method according to claim 1, wherein the 
first computing device is caused to report periodically. 

8 . (previously presented) A method according to claim 1 in 
which the second computing device authenticates the trust policy 
update issued by the assessor computing device before accepting 
it. 

9. (previously presented) A method of operating a trusted 
computing system comprising a plurality of computing devices on 
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a network, in which a first computing device has a trusted 
component which issues a report pertaining to the 
trustworthiness of the first computing device wherein a trust 
policy controller receives said report via the network from the 
trusted component and updates via the network the trust policy 
of a second computing device in accordance with said report. 

10. (currently amended) A method of operating a trusted 
computing system comprising multiple computing devices on a 
network , the method comprising: 

a trust policy controller receiving reports via the network 
pertaining to the trustworthiness of each said computing device; 
and 

wherein a the trust policy controller dctcrminco 
determining the trust policy for each of said computing devices 
in accordance with the trustworthiness of other of said multiple 
computing devices as determined from said received reports 
received by the controller via the network pertaining to the 
truotworthincoo of each computing device . 

11. (previously presented) An assessor computing device for 
controlling a trusted computing system comprising multiple 
computing devices on a network, the assessor comprising a 
receiver for receiving via the network a report from, and 
pertaining to the trustworthiness of, a first computing device, 
an updater for updating the trust policy of a second computing 
device in accordance with the report, and a transmitter for 
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transmitting the updated policy to the second computing device 
via the network. 

12. (previously presented) An assessor computing device 
according to claim 11, wherein the updater is arranged to update 
the trust policies of multiple computing devices in accordance 
with the report and the transmitter is arranged to transmit the 
updated policies to the multiple computing devices via the 
network. 

13. (previously presented) An assessor computing device 
according to claim 11, wherein the updater updates policies by 
assessing the trustworthiness of the first computing device on 
the basis of information about the first computing device in the 
report . 

14. (previously presented) An assessor computing device 
according to claim 11, wherein the updater updates policies on 
the basis of an assessment of the trustworthiness of the first 
computing device contained in the report. 

15. (previously presented) An assessor computing device 
according to claim 11 further comprising a requestor, for 
requesting the report from the first computing device. 
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16. (previously presented) A system, comprising: 

an assessor computing device for controlling a trusted 
computing system comprising multiple computing devices on a 
network, the assessor comprising 

a receiver for receiving via the network a report 
from, and pertaining to the trustworthiness of, a first 
computing device, 

an updater for updating the trust policy of a second 
computing device in accordance with the report, and 

a transmitter for transmitting the updated policy to 
the second computing device, and 

the system further comprising first and second computing 
devices, wherein at least the first computing device comprises a 
reporter for sending via the network a trustworthiness report to 
the assessor computing device and at least the second computing 
device comprises a memory maintaining a trust policy such that 
the trust policy is modifiable by the transmitter. 

17. (original) A system as claimed in claim 16 in which the 
reporter comprises a trusted component associated with the first 
computing device. 

18. (previously presented) A system, comprising: 
multiple computing devices on a network, and 
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a trust policy controller which serves to determine the 
trust policy of said computing devices; 

each of said computing devices having associated with it a 
trust policy memory to store a trust policy for that computing 
device, and a trusted component which issues a report pertaining 
to the trustworthiness of that computing device; wherein 

the controller receives via the network reports from the 
trust components and updates via the network the trust policy in 
the trust policy memory of each computing device in accordance 
with the trustworthiness of other of said multiple computing 
devices as determined from said reports. 



